Smashing Security (Graham Cluley & Carole Theriault)

Your smartphone may be toast - if you use a hacked wireless charger, we take a closer look at the latest developments in the unfolding LockBit ransomware drama, and Carole dips her toe into online AI romance apps.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• VoltSchemer: Use Voltage Noise to Manipulate Your Wireless Charger - ArXiv.
• FBI offers free decryption help for LockBit ransomware victims - Paul Ducklin.
• LockBitsupp unmasked!!? Graham’s reaction to the FBI and NCA’s LockBit ransomware revelation - YouTube.
• Dating Statistics And Facts In 2024 – Forbes Health.
• Romantic AI Chatbots Don't Have Your Privacy at Heart - Mozilla Privacy Not Included.
• Promptsmart.
• Solving a celestial mystery: the Sun, Earth and Moon model - Museum of Natural History, Oxford.
• Lotus Bud.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon,...

Australia's signal intelligence agency calls upon an Eighties popstar to fight terrorism, and a simple act of kindness leads to a woman being scammed for thousands.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus - don't miss our featured interview with Max Power of Bitwarden.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Australian cyber-op attacked ISIL with the terrifying power of Rickrolling - The Register.
• “Breaking the code: Cyber Secrets Revealed” - ABC.
• Scam Alert: Woman tries helping injured bird, ends up losing Rs 1 lakh to cyber criminals - MSN News.
• Toll-free Hijack Alert (misdial scam) - AT&T.
• “Connected: the hidden science of everything” - Netflix.
• “Connections” with James Burke - YouTube.
• “I wanna marry Harry” reality show    - Wikipedia.
• “Space cadets” reality show - Wikipedia.
• Unreal: A Critical History of Reality TV - Apple Podcasts.
• Famous Studios - Famous Studios website.
• Unreal: A Critical History of Reality TV - BBC Sounds.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
• Centripetal – Centripetal’s CleanINTERNET defends your assets from cyber threats by leveraging dynamic threat intelligence on a mass scale.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter

A big cheese ends up in jail, a Japanese dating site spills the dirt after a hack, and we learn all about the right to repair.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Paul Roberts from The Security Ledger.

Plus don't miss our featured interview with Javvad Malik from KnowBe4.

Visit https://www.smashingsecurity.com/229 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Javvad Malik and Paul F Roberts.

Sponsored By:

• KnowBe4: Did you know that 91% of successful data breaches started with a spear phishing attack? Find out what percentage of your employees are at risk with KnowBe4's free phishing security test. Plus, see how you stack up against your peers with the new phishing industry benchmarks. Find out more at knowbe4.com/freetest
• OneLogin: According to the OneLogin IAMokay Mental Health Survey, more than 77% of technology leaders have said that their work-related stress increased due to the COVID-19 pandemic. As a result, CISOs and IT executives have been under ever-increasing pressure - leading to deteriorating mental health, addiction issues, and even suicidal thoughts and tendencies. OneLogin's message? You're not alone. Attend their live event on Weds May 26, "Keeping the Mind Clear and the Company Secure" at smashingsecurity.com/oneloginiamokay
• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

Support Smashing Security

Links:

• Cheese Is Addictive As Drug: Dairy Product Triggers Brain Region Linked To Addiction — Tech Times.

Twitter and the not-so-ethical hacking of celebrity accounts, study discovers how you can pay someone to quit Facebook for a year, and the millions of dollars you can make from uncovering software vulnerabilities.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.
• 
  
• "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks.
• 
  
• Download it for free at smashingsecurity.com/intelligence
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Dad pays girl $200 to give up Facebook — YouTube.
• How much is social media worth? Estimating the value of Facebook by paying users to stop using it — PLOS.
• Being paid to quit Facebook — Graham Cluley.

Fears are raised about cyber bioterrorists, there's a widespread blackout for IoT devices caused by a cloud cock-up, and what role do strippers play in a revamp of the United States's computer crime laws?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

And don't miss our featured interview with Steve Salinas of Deep Instinct, discussing ransomware.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Mark Stockley and Steve Salinas.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams. Learn more and try it for yourself at culture.ai/smashing
• Deep Instinct: Most people agree that the most effective way to reduce the cost of an attack is to prevent it from happening in the first place! Check out a report by the Ponemon Institute, which studied the cost savings of adopting an efficient prevention model. Go grab it at smashingsecurity.com/deepinstinct

Support Smashing Security

Links:

• Smashing Security's Christmas 2020 live stream — Join us on YouTube on Thursday 17 December 2020 at 8pm (UK) / 3pm (Eastern) / Noon (Pacific)
• Increased cyber-biosecurity for DNA synthesis — Nature Biotechnology.

Why are students faking their own kidnappings? What's the story behind Garmin's ransomware attack? And a genetic genealogy website suffers a hack or two.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ray [REDACTED].

Warning: This podcast may contain nuts, adult themes, and rude language.

Links:

• Tribe of Hackers Podcast.
• Golden State Killer pleads guilty to 13 murders — BBC News.
• Joseph James DeAngelo — Wikipedia.
• Hackers Attacked Two Leading Genetic Genealogy Websites — Buzzfeed News.
• GEDmatch confirms data breach after users’ DNA profile data made available to police — TechCrunch.
• Garmin outage caused by confirmed WastedLocker ransomware attack — Bleeping Computer.
• Charges Announced in Malware Conspiracy — FBI.
• Garmin staggers back online after ransomware attack — Graham Cluley.
• Coronavirus: China warns students over 'risks' of studying in Australia — BBC News.
• Chinese students in Australia targeted in virtual kidnapping scam — BBC News.
• Chinese students in Australia are being targeted in kidnapping scams, police warn — South China Morning Post.
• Chinese Students in Australia Are Faking Their Own Kidnappings. Here’s Why — Vice.
• SecondHandSongs.
• Doomsday Algorithm — Just in case you didn't understand Ray's explanation...
• Incredibox.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Immersive Labs - Giving security professionals practical and gamified...

Has the British Prime Minister been caught secretly profiting from a cryptocurrency app? Were 23andMe right to blame their users after a data breach? And Indian men have hard feelings after falling for a money-for-sex scam.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• What Rishi Sunak gets up to over Christmas… - YouTube.
• Boris Johnson's Love Actually parody (Conservative Party election broadcast) - YouTube.
• UK's Rishi Sunak becomes richest ever occupant of Number 10 - Reuters.
• Over 100 Deep-Faked Rishi Sunak Ads Found on Meta’s Platform - Fenimore Harper Communications.
• Slew of deepfake video adverts of Sunak on Facebook raises alarm over AI risk to election - The Guardian.
• 23andMe Blames User “Negligence” for Data Breach - Infosecurity Magazine.
• All India Pregnant Job service: Indian men conned by 'impregnating women' scam - BBC News.
• World War II: From the Frontlines - Netflix.
• Spintronics - Upper Story.
• Reacher - Amazon Prime.
• The Trust - Netflix.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release...

A Russian bank tells its customers to stop installing security updates, an Apple employee ends up in hot water, and learn our tips to avoid being virtually kidnapped.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

Visit https://www.smashingsecurity.com/267 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Anna Brading.

Sponsored By:

• Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.
• 
  
• Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated.
• 
  
• Try Kolide Free for 14 Days; no credit card required.
• Drata: Is your organization finding it difficult to achieve compliance and scale its security posture? As G2’s highest rated cloud compliance software, Drata streamlines your SOC 2, ISO 27001, PCI DSS, GDPR & HIPAA compliance and provides 24-hour continuous control monitoring so you focus on scaling securely. Drata is also the only compliance automation platform with a private tenant database. That’s like having your cake and securing it too
• 
  
• Countless security professionals from companies including Notion, FullStory, & BambooHR have shared how crucial it has been to have Drata as a trusted partner in the compliance process.
• 
  
• Listeners of Smashing Security can get 10% off Drata and waived implementation fees at smashingsecurity.com/drata

Support...

Leicester City Council suffers a crippling ransomware attack, and a massive data breach, but is it out of the dark yet? And as election fever hits India we take a close eye at deepfakery.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• When a breach goes from 25 documents to 1.3 terabytes… - Graham Cluley.
• Leicester street lights stuck on all day due to cyber attack - Leicester Mercury.
• Top AI researchers race to detect ‘deepfake’ videos: ‘We are outgunned - Washington Post.
• AI deepfakes threaten to upend global elections. No one can stop them - Washington Post.
• Models, dead netas, campaigning from jail: How AI is shaping Lok Sabha polls - India Today.
• Why Elections Take So Long in India - The New York Times.
• How A.I. Tools Could Change India’s Elections  - The New York Times.
• Bollywood deepfakes fuel AI election meddling fears in India - GG2.
• World Explained: How India's politicians are using AI to reach voters in the world’s most populous country - The Scotsman.
• 12 Angry Men - Wikipedia.
• VIA Rail.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Sonrai's Cloud Permissions Firewall - A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your...

We're joined by special guest Jamie Bartlett, of the chart-topping "The Missing Cryptoqueen" podcast, in this bumper episode where we discuss his investigation into the OneCoin cryptocurrency scam, the Russian cybercriminals behind Evil Corp, and the mysterious leaks about the NHS that have turned oh-so-political...

All this and much much more can be found in the latest edition of the "Smashing Security" podcast, hosted by computer security veterans Graham Cluley and Carole Theriault.

Visit https://www.smashingsecurity.com/158 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jamie Bartlett.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Russian hacking group "Evil Corp" accused of targeting American businesses — CBS News, YouTube.
• Evil Corp donuts — YouTube.
• International law enforcement operation exposes the world’s most harmful cyber crime group — National Crime Agency.
• Treasury Sanctions Evil Corp, the Russia-Based Cybercriminal Group Behind Dridex Malware — U.S. Department of the Treasury.
• UK Government Releases Photos of Russian Hackers, Whose Lives

Jack Rhysider from the "Darknet Diaries" podcast joins us to chat about his interview with the elusive Hacker Giraffe, how a death is preventing cryptocurrency investors from reaching their money, and how 'beauty camera' apps are redirecting users to phishing websites and stealing their selfies.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jack Rhysider of the "Darknet Diaries" podcast.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jack Rhysider.

Sponsored By:

• Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.
• 
  
• "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks.
• 
  
• Download it for free at smashingsecurity.com/intelligence
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• This hypnotist helps people recover lost bitcoin passwords — CNBC.
• Good News! You Are a Bitcoin Millionaire. Bad News! You Forgot Your Password — Wall Street Journal.

Can a video game help your company's staff choose stronger passwords? Why might satellite-based internet communications be bad for security? And what are the alternatives to TikTok?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/191 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Passworld: A Serious Game to Promote Password Awareness and Diversity in an Enterprise — USENIX.
• Whispers Among the Stars: A Practical Look at Perpetrating (and Preventing) Satellite Eavesdropping Attacks — Black Hat USA 2020.
• Satellite Broadband Security - James Pavur — YouTube.
• Twitter and TikTok reportedly have had talks about a deal — The Verge.
• Trump bans US transactions with Chinese-owned TikTok and WeChat — The Guardian.

A bad software update causes big headaches for Dutch police, but brings temporary freedom to criminals. SIM swaps are in the news again as fraudsters steal millions. And does your cloud photo storage service have a dirty little secret?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Rip Off Britain's David McClelland.

Visit https://www.smashingsecurity.com/128 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: David McClelland.

Sponsored By:

• Gartner: Gartner's Security & Risk Management Summit, running from June 17-20 2019 in National Harbor, Maryland, is the premier cybersecurity conference for CISOs, IT Security & Risk Professionals. Get the latest unbiased research and advice on cyber attacks, and emerging technologies including AI, blockchain, machine-learning and more.
• Visit smashingsecurity.com/gartner to find out more. Smashing Security listeners can save $350 off the standard registration rate by using the code "SMASHING". Promo Code: SMASHING
• Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.
• 
  
• "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks.
• 
  
• Download it for free at smashingsecurity.com/intelligence
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  

Voting machines are under the microscope, scammers are posing as rap stars, and American politician AOC isn't the only one who's been getting into the Among Us game.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by James Thomson.

Plus don't miss the first part of our featured interview with LastPass's Dalia Hamzeh.

Visit https://www.smashingsecurity.com/202 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Dalia Hamzeh and James Thomson.

Sponsored By:

• Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources.
• 
  
• For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express.
• 
  
• Get it now at smashingsecurity.com/recordedfuture
• Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats.
• 
  
• Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses.
• 
  
• Go to immersivelabs.com/smashing
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee...

Trouble brews with the Tim Hortons app, Mandiant gets in a tussle with a Russian ransomware gang, and should good faith security researchers be at risk of prosecution?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.

Visit https://www.smashingsecurity.com/278 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Geoff White.

Sponsored By:

• Snyk: Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer's toolkit.
• 
  
• Get started right now, with a free forever account, at snyk.co/smashing
• Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
• 
  
• Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.
• 
  
• You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.
• Bitwarden: A password manager is an important tool for generating and saving secure credentials for every online account. Bitwarden makes it easy to stay secure and for businesses to share logins with team members and departments. Open source with published 3rd party security audits, Bitwarden is transparent and secure, utilizing end-to-end and zero knowledge encryption with source

Heaven's above! Scammers are exploiting online funerals, and LockBit - the "Walmart of Ransomware" - is dismantled in style by cyber cops.

All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Keiron Holyome about how BlackBerry is using predictive AI to stay one step ahead against threats.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Law enforcement disrupt world’s biggest ransomware operation - Europol
• Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates - Krebs on Security.
• International investigation disrupts the world’s most harmful cyber crime group - UK National Crime Agency.
• LockBit Victim Reporting Form - FBI.
• Fake Funeral Live Stream Scams Are All Over Facebook - 404 Media.
• Closed Captions (CC) vs Subtitles - Subly.
• Fingernails — Official Trailer - YouTube.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the

Why was Zoho's website taken offline by its own domain registrar? How are dash cams making you less secure? And why are robocalls on the rise in the United States?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• Update on Zoho Services Disruption - Zoho Blog
• Zoho CEO Sridhar Vembu asks for help on Twitter
• Whoa – oh no, Zoho: Domain name no-show deals CRM biz, 40m punters a crushing blow
• Domain registrar oversteps taking down Zoho domain, impacts over 30Mil users
• Blackvue Dash-Cams Broadcasting Live Video and GPS of Your Car PUBLICLY by DEFAULT! - YouTube
• Tim Woodruff's tweet about BlackVue dash cams
• Yes, It’s Bad. Robocalls, and Their Scams, Are Surging
• YouMail - Robocall Index
• 4.2 Billion Robocalls in August Set All-Time Record for YouMail Robocall Index

Hotel malware has been stealing guests' payment card details... again, should businesses relay delay rolling out vulnerability patches, and Burger King's Whopper TV ad campaign tries to take advantage of viewers' Google Home devices with predictable results.

All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul Ducklin.

Show notes:

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Paul Ducklin.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats. Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Ahoy! There's trouble in the South China Seas as Filipino organisations fail to secure their systems, we take a close look at Google IP protection, and we take a look at just how so much genetic profile data leaked out of 23andMe.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Philippines’ cybersecurity failures exposed as hackers leak state secrets, people’s data - South China Morning Post.
• IT admins are just as culpable for weak password use - Outpost24.
• Google Chrome wants to hide your IP address - MalwareBytes.
• The 23andMe data breach reveals the vulnerabilities of our interconnected data - The Conversation.
• 23andMe User Data Stolen in Targeted Attack on Ashkenazi Jews - Wired.
• Worried about the 23andMe hack? Here's what you can do - Washington Post.
• Paris Police 1905 - BBC iPlayer.
• British Hen Welfare Trust.
• Art Musings - Art Musings podcast.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or

While "Smashing Security" is on its summer holiday, here's a chance to listen to an episode of its sister show - "The AI Fix".

In episode ten of The AI Fix, Graham attempts to say "quinoa", Mark draws a line in the amper-sand, ChatGPT becomes an expert in solar panels and bomb disposal, and our hosts watch a terrifying trailer for a creepy new AI friend.

Graham discovers that the world of AI cookery is a soggy, limey mess, and learns an unusual trick for making a great mojito, while Mark pits his co-host against the cleverest AI brains in the world.

Episode links:

• OpenAI starts rollout of Advanced Voice Mode.
• UK Government shelves £1.3bn UK tech and AI plans.
• Friend trailer.
• Artificial intelligence has hard time with accents.
• Netherlands court uses ChatGPT to decide things.
• Argentina will use AI to ‘predict future crimes’ but experts worry for citizens’ rights.
• Twitter thread on crockpot cookbook.
• Get ready for AI to rip off your favorite cookbooks.
• ‘One of the most disgusting meals I’ve ever eaten’: AI recipes tested.
• This cookbook author was a best-seller on Amazon — but she may not even be human.
• ARC Prize.
• ARC Prize leaderboard.
• On the Measure of Intelligence research paper by François Chollet.

The AI Fix

The AI Fix podcast is presented by Graham Cluley and Mark Stockley.

Learn more about the podcast at theaifix.show, and follow us on Twitter at @TheAIFix.

Never miss another episode by following us in your favourite podcast app. It's free!

Like to give us some feedback or sponsor the podcast? Get in touch.

Is your used car still connected to its old owner? Just how did Apple manage to identify the teenager hacker who stole 90GB of the firm's files? And why on earth would a firm of lawyers start producing pornographic videos? You'll be surprised by the answers!

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Paul Ducklin.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Connected car data handover headache: There's no quick fix... and it's NOT just Land Rovers
• Shock Land Rover Discovery: Sellers could meddle with connected cars if not unbound
• The hidden data danger of the ‘Connected’ car
• Your BMW or Merc may also be at risk of being hacked, because of your iOS app
• Samy, the MySpace worm written by Samy Kamkar
• Apple hacked by 16-year-old who “dreamed” of working for firm
• Melbourne teen hacked into Apple's secure computer network, court told
• Prenda Law stories at...

A man loses $650,000 from his cryptocurrency wallet after his Apple iCloud account is hacked, video conferencing apps may not be muting your mic quite the way you imagined, and Google has unblurred military bases in Russia... or has it?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/271 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• NetFoundry: NetFoundry's OpenZiti is an open source, free and easy way for the world to embed zero trust networking into anything.
• 
  
• Embed SDKs inside your app, tunnelers to run on all major operating systems, or deploy an Edge Router for any cloud.
• 
  
• No networking engineering skills required. No more pain of inbound ports, VPNs, complex firewall rules, public DNS, and more.
• 
  
• Learn more and try it for yourself at netfoundry.io/smashingsecurity/
• Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.
• 
  
• Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated.
• 
  
• Try Kolide Free for 14 Days; no credit card required.

Support Smashing Security

Links:

Who's wearing the pyjamas while they take down North Korea's internet? Is it a case of cop or cosplay in Oregon? And what's to fear about the metaverse?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/261 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• 1Password: 1Password Families makes sharing passwords, logins, credit cards and more a (romantic) walk in the park. From now until February 28th, when you sign up for - or upgrade your individual account to - a 1Password Families membership, you’ll get $20 off the entire year!
• 
  
• Learn more at smashingsecurity.com/love1password
• baramundi: Optimize your IT processes with the baramundi Management Suite and make optimal use of resources by automating time-consuming routine tasks.
• 
  
• Stay in control and maximize your productivity by automating routine tasks. The Unified Endpoint Management Software can be installed and implemented quickly, is intuitive to use, has a modular structure and offers a high level of usability and transparency.
• 
  
• Try out the free 30-Day full version for yourself today at baramundi.com/smashingsecurity

Support Smashing Security

Links:

• Space Station Photos Show North Korea at Night, Cloaked in Darkness — National Geographic.
• North Korea Hacked Him. So He Took Down Its Internet — Wired.

The video game Path of Exile 2 suffers a security breach, we explore the issues of using predictive algorithms in travel surveillance systems, and the very worst IoT devices are put on show in Las Vegas. Oh, and has Elon Musk accidentally revealed he cheats at video games?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Player of Games - Grimes.
• ‘Path of Exile 2’ Players Call Bulls**t on Elon Musk’s Video Game Stream - Gizmodo.
• Elon Musk "Playing" Path of Exile 2 - YouTube.
• Elon Musk is Lying About Being Good at Video Games - YouTube.
• Elon Musk Streams His ”Totally Not Boosted” ‘Path of Exile 2’ Character, Proves He Has No Idea What He’s Doing - Vice.
• Hacker Broke into ‘Path of Exile 2’ Admin Account, Hijacked Wave of Characters - 404 Media.
• Inside the Black Box of Predictive Travel Surveillance - WIRED.
• Average Number of Smart Devices in a Home 2025 - Consumer Affairs.
• Global IoT and non-IoT connections 2010-2025 - Statista.
• U.S. Cyber Trust Mark: New Label for IoT Devices - National Law Review. 
• How the Internet of Things will be good for the planet - Thales Group.
• The ‘Worst in Show’ CES products put your data at risk and cause waste, privacy advocates say - AP News.
• The CES worst in show awards lampoon AI everthing - The Register.
• The Worst Devices of CES 2025!! - YouTube. 
• This Could Be Your AI Robot Girlfriend - For $175,000 - Forbes.

Who stopped Twitter's hackers from stealing more money? Why are Covid-19 researchers being told to ramp up their cybersecurity? How can you find out if your smartphone is infected with stalkerware? And who does Graham think he is turning down a celebrity dinner invite?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Lisa Forte.

Visit https://www.smashingsecurity.com/188 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Lisa Forte.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• The Twitter mega-hack. What you need to know — Tripwire State of Security.
• The Twitter hack: Why Elon Musk, Bill Gates, Jeff Bezos and others might have reason to be worried — Graham Cluley.
• Twitter Hackers Could Have Stolen A Whole Lot More Bitcoin — Forbes.
• Twitter says hackers downloaded private account data — BBC News.
• UK condemns Russian...

Apps that belch out sensitive military information, what could the world learn from South Korea's digital response to the Coronavirus pandemic, and who has been deepfaking Bill Clinton, Jay-Z, and Donald Trump... and why?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Brian Klaas of the "Power Corrupts" podcast.

Plus we have a bonus feature interview with Rachael Stockton from Logmein, the folks behind LastPass, all about their report into the psychology of passwords.

Visit https://www.smashingsecurity.com/179 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Brian Klaas and Rachael Stockton.

Sponsored By:

• LastPass: LastPass's "Psychology of Passwords" report surveyed over 3,000 people around the world to highlight the current state of online security behaviors – and the results are alarming.
• 
  
• 
  
• Download it now at smashingsecurity.com/passwordreport
• Immersive Labs: Immersive Labs gives security professionals practical and gamified content to keep pace with the latest threats.
• 
  
• 
  
• Listeners can signup at immersivelabs.com/smashing to get instant access to more than 24 hours of free labs AND a new lab to try out each week.
• Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.
• 
  
• 
  
• 
  
• Listeners can get a 40% discount on the Boxcryptor Personal License (private use)

Twerking robot assistants, an app from Saudi Arabia that lets men track women, and a gnarly skiing security snarl-up!

Oh, and find out how a didgeridoo could change your life and that of your loved ones.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Geoff White.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Geoff White.

Sponsored By:

• Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.
• 
  
• "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks.
• 
  
• Download it for free at smashingsecurity.com/intelligence
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• A Jibo twerking — YouTube.
• Tweet by Dylan Martin about Jibo — Twitter.
• After Being Sold to a VC Firm, this $899 IoT Robot Will Soon Brick Itself — Motherboard.

A high-rolling Hushpuppi gets extradited to the United States, Carole details her problems with clipboards and Disposophobia, and our guest becomes the subject of fake news during the Senegalese election.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by investigative journalist Michelle Madsen (or is it Michelle Damsen? Hmm...).

Visit https://www.smashingsecurity.com/186 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Michelle Madsen.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Authentic8: Silo for Research (Toolbox) from Authentic8 is a secure and anonymous web browsing solution that enables threat intelligence, security, and public safety professionals to conduct research, collect evidence, and analyze data across the open, deep and dark web.
• 
  
• 
  
• 
  
• To learn how Silo for Research enables teams to timely and efficiently investigate, while ensuring maximum security and oversight to ensure compliance - including GDPR - go to smashingsecurity.com/authentic8

Support Smashing Security

Links:

• Ray Hushpuppi's Instagram account.
• Your 2.3m Instagram fans won't stop the FBI... Web

The iPhone 8 is on its way and may use 3D facial recognition rather than a fingerprint sensor to lock out intruders, and the UK's Automobile Association claims it hasn't leaked any credit card data, so why is it getting so upset about security researchers publishing screenshots of leaked data?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by umm.. nobody.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats. Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• Yes - despite what it says - AA customer credit card data was exposed
• Apple Readies iPhone Overhaul for Smartphone’s 10th Anniversary - Bloomberg
• The World's Blackest Material - An Inside Look At Vantablack — YouTube video.
• About Touch ID advanced security technology - Apple Support
• He thought a book would stop a bullet and make him a YouTube star. Now he’s dead. - The Washington Post
• Firik Sleep Headphones — For those of you who want to look like John McEnroe when you're snoozing in bed.

Cheap Android smartphones sold on Amazon have been sending customers' full text messages to a Chinese server, ski lifts are found to be the latest devices left open to abuse by hackers, and we remind you why password managers are a good idea on World Password Day. Oh, and our guest serenades us with a hit from the 1980s!

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by journalist and broadcaster David McClelland.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: David McClelland.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• See Smashing Security LIVE!
• Mobile Phone Maker BLU Reaches Settlement with FTC over Deceptive Privacy and Data Security Claims
• Phone maker settles charges it let partner collect customers’ text messages
• Backdoor in some Android phones caught secretly sending data to China
• UK bank advises against password managers - Twitter
• Santander Locks Horns with Security Pros, NCSC Over Password Managers
• Passwords - a Smashing Security splinter episode
• Terrifying Ski Lift Malfunction Caught On Camera - YouTube
• Ski...

On May 4th 2000, the Love Bug virus (also known as ILOVEYOU or LoveLetter) rapidly spread around the world, clogging up email systems.

Computer security veterans Graham Cluley and Carole Theriault are joined this week by special guest John Hawes for a trip down memory lane.

 Show notes:

• Memories of the Love Bug worm - Naked Security
• "Subject: I Love You" movie trailer - YouTube

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Hawes.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats. Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Join us for our special Christmas episode as we tell tales of printer hacking, website defacement, Grinches, and how Google is snooping on your private YouTube videos.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Dave Bittner from The Cyberwire.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• Smashing Security: We're sponsoring ourselves this week! Get in touch at studio@smashingsecurity.com if you're interested in partnering with us for a future episode of the show.

Support Smashing Security

Links:

• PewDiePie printer hackers strike again — BBC News.
• ASCII art attack — Smashing Security episode 007.
• TheHackerGiraffe — Patreon.
• Buying PewDiePie a $1M Billboard in Times Square! — YouTube.
• I Bought Every Billboard In My City For This — YouTube.
• PewDiePie Billboards in INDIA | T-Series vs PewDiePie — YouTube.
• WSJ website defaced by PewDiePie fan in ongoing YouTube subscribers battle — ZDNet.
• Disney Severs Ties With YouTube Star PewDiePie After Anti-Semitic Posts — Wall Street Journal.
• TheHackerGiraffe comments on WSJ defacement — Twitter.
• Cockwomble definition — Urban Dictionary.
• The Wombles Season 1 —...

Could a senior Latvian politician really be responsible for scamming hundreds of "mothers-of-two" in the UK? (Probably not, despite Graham's theories...) And should we be getting worried about the AI wonder that is ChatGPT?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Plus don't miss our featured interview with DigiCert’s Brian "PKI" Trzupek.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Artis Pabriks.
• ‘I left my partner and lost £80,000 to a fake Facebook romance’: Manchester mum’s warning over catfishing scam - Manchester World.
• 'I know I have been a fool but these are the things we do for love', says mum duped out of £80k by Facebook lover - Manchester Evening News.
• Amazon Warns Employees to Beware of ChatGPT - Gizmodo. 
• ChatGPT's soaring popularity has added $5 billion to the wealth of Nvidia's founder as Wall Street bets on AI boom for the chipmaker - Business Insider. 
• ChatGPT raises red flags by acing MBA exam.
• ChatGPT passes exams from law and business schools - CNN. 
• I asked ChatGPT how to negotiate a raise. Career coaches said I'd probably get one by following the AI chatbot's steps and script - Business Insider. 
• Real estate agents say they can’t imagine working without ChatGPT now - CNN. 
• Science journals ban listing of ChatGPT as co-author on papers - The Guardian. 
• Blakes 7 Bot - an automated bot that posts lines of dialogue from Blakes 7.
• Yarn - Find video clips by quotes.
• The New Gurus Podcast - BBC Sounds. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for....

Booking.com got hacked five years ago, and didn't tell its customers... but now we know who might have been behind it. Bossware rears its ugly head again in the workplace, spying on employees. And did you receive a warning email from the FBI?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Brian Klaas of the "Power Corrupts" podcast.

Plus we have a featured interview with Perimeter 81 co-founder and CEO Amit Bareket.

Visit https://www.smashingsecurity.com/252 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Amit Bareket and Brian Klaas.

Sponsored By:

• Perimeter 81: Perimeter 81 is the first-ever Cybersecurity Experience Platform, designed around Instant Deployment, Unified Management, Integrated Security, and Full Visibility.
• 
  
• Perimeter 81 allows organizations of any and all industry sizes to support IT teams with robust tools to secure and manage your global network with one unified platform.
• 
  
• Securing remote access for cloud and hybrid businesses and organizations, Perimeter 81 provides unified solutions such as Zero Trust Network Access, Firewall as a Service, Device Posture Check, and more.
• 
  
• Learn more and request a demo at perimeter81.com
• Qualys: Qualys was one of the first SaaS security companies, and delivers continuous, critical security intelligence via its Qualys Cloud Platform and integrated Cloud Apps.
• 
  
• Its powerful solutions empower organisations to streamline and consolidate their security and compliance solutions in a single platform and achieve greater business agility, better outcomes and substantial cost savings.
• 
  
• Qualys recently announced three new solutions designed to address today’s challenges faced by enterprises: Ransomware Risk Assessment, Cybersecurity Asset Management, and Zero Touch...

Who gets to decide who should be CEO of OpenAI? ChatGPT or the board? Plus a ransomware gang goes a step further than most, reporting one of its own data breaches to the US Securities and Exchange Commission.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Hackers Use Online Casinos to Gamble Mountains of Cash They Steal from Victims - 404.
• AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC - DataBreaches.net.
• SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies - US Securities and Exchange Committee.
• OpenAI announces leadership transition - OpenAI.
• The Fear and Tension That Led to Sam Altman’s Ouster at OpenAI - The New York Times.
• Emergency Pod: Sam Altman is Out at Open AI - The New York Times.
• What We Know About Sam Altman’s Ouster From OpenAI  - The New York Times.
• Ousted OpenAI C.E.O. Makes Plans for New Artificial Intelligence Company - The New York Times.
• Microsoft Hires Sam Altman Hours After OpenAI Rejects His Return - The New York Times.
• In the battle to bring ousted founder Sam Altman back to OpenAI, Microsoft and Satya Nadella hold the trump cards - Fortune.
• Rate your resignation letter - Twitter account.
• Suella Braverman’s resignation letter - Twitter.
• Analysis of letter by Dame Andrea Jenkyns - Twitter.
• Thread about letter from Dame Andrea Jenkyns - Twitter.
• The Future by Naomi Alderman review - The Guardian.
• The Future by Naomi Alderman - Harper Collins.

The FBI think they've identified the HBO hacker, the US military have been caught with a leaky bucket, and web tracking has just got scarier than ever.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's Iain Thomson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Iain Thomson.

Support Smashing Security

Links:

• Uber paid hackers $100,000 to keep data breach quiet
• HBO offered its hackers $250,000 after attack, leaked email claims
• Game of Thrones stars’ personal phone numbers leaked, as HBO hackers attempt to extort ransom
• Smashing Security 037: Boobs, dragons and data breaches
• Iranian ‘Game of Thrones’ Hacker Demanded $6 Million Bitcoin Ransom From HBO, Feds Say
• Sealed Indictment
• Over 400 of the World's Most Popular Websites Record Your Every Keystroke, Princeton Researchers Find
• No boundaries: Exfiltration of personal data by session-replay scripts
• Data release: list of websites that have third-party “session replay” scripts
• The dark side of Replay Sessions that record your every move online
• Shark Attack 3 - That Famous Line (NSFW!)

A Kansas City man is accused of hacking into local businesses, not to steal money, but to... get a cheaper gym membership? A DNA-testing firm has vanished, leaving customers in the dark about what's happened to their sensitive genetic data. And Australia mulls a social media ban for youngsters.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• KC Man Indicted for Computer Hacking - Department of Justice.
• DNA testing company vanishes along with its customers’ genetic data - Malwarebytes.
• DNA firm holding highly sensitive data 'vanishes' without warning - BBC News.
• Australia proposes 'world-leading' ban on social media for children under 16 - Reuters.
• The government has introduced laws for its social media ban. But key details are still missing - The Conversation.
• Australia's under-16 social media age ban legislation excludes messaging apps - YouTube.
• Australia’s plan to ban children from social media popular but problematic - PBS News.
• Which Countries Are Considering Social Media Bans For Teens? - Newsweek.
• Graham’s previous encounter with hobs with knobs - Smashing Security.
• “The Day of the Jackal” trailer - YouTube.
• "Anora” trailer  - YouTube. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• ThreatLocker - the Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally....

How are cheerleaders being creeped out by deepfakes? What might Tinder tell potential dates about your murky past? And how should companies respond to the press when a security breach occurs?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Yvonne Eskenzi.

Visit https://www.smashingsecurity.com/219 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Yvonne Eskenzi.

Sponsored By:

• CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer.
• Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less.
• 
  
• Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services.
• 1Password: Check out 1Password's podcast "Random but Memorable" for lighthearted security advice and banter with hosts Matt, Anna, and Michael.
• 
  
• Listen to the "Random but Memorable" show in your favourite podcast app to hear the latest about security horror stories, data breaches, password hacking, and more.

Support Smashing Security

Links:

• Chris Farley makes an energetic entrance to the David Letterman show — YouTube.
• Cheer —

Blackmailers are threatening to infect your family with Coronavirus, trolls are making Zoom an unsafe place for those of a sensitive disposition, and what is the mysterious Dr Negrin audio message spreading on WhatsApp?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Geoff White.

Visit https://www.smashingsecurity.com/171 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Geoff White.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• "Stay home and help flatten the curve!" — Tweet by Pornhub.
• ‘Dirty little secret’ extortion email threatens to give your family coronavirus — Naked Security.
• Google Assistant calling the hairdresser for an appointment — YouTube.
• Geoff White tweets about the "Dr Negrin" audio message. — Twitter.
• Priest in Italy live streams mass, activates filters by mistake — Reddit.
• Beware of...

Penile penal problems, identifying rioters in Washington DC, and can a sticker protect you from radiation?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

And don't miss our featured interview with CrowdSec's Philippe Humeau.

Visit https://www.smashingsecurity.com/210 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Dave Bittner and Philippe Humeau.

Sponsored By:

• CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer.
• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

Support Smashing Security

Links:

• Smashing Security's Christmas live stream — YouTube.
• Smashing Security 199: A few tech cock-ups, and one cock lock-up.
• Taking a screwdriver to unlock your IoT sex toy is nuts — Graham Cluley.
• Zip tie guy Twitter thread.
• FBI Arrests Man Who Carried Zip Ties Into Capitol — The New York Times.
• SmartDot radiation-protection phone stickers 'have no effect' — BBC News.

How to find your match on the Bumble dating app, convicted criminals make money out of cryptocurrency, and there are concerns about data in Afghanistan.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/241 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• 1Password: Cybercrime is at an all-time high, and it’s not slowing down, so why should you? This August, you’re invited to Security Summer School, a brand new webinar series hosted by the 1Password team.
• 
  
• Learn from security experts at top organizations, hear about sizzling security trends, and get quick tips for building a culture of security at home and work.
• 
  
• Get exclusive perks like 1Password swag for attending events, enjoy the chance to network with top security leaders, and much much more. Find out more and enroll now.
• Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now.

Support Smashing Security

Links:

• Vulnerability in Bumble dating app reveals any user's exact location — Robert Heaton.
• How Tinder keeps your exact location (a bit) private — Robert Heaton.
• The Taliban Have Seized U.S. Military Biometrics Devices — The Intercept.

Darknet Diaries host Jack Rhysider joins us to discuss how cities in Texas are being hit by a wave of ransomware, how Mercedes Benz has installed a tracker in your car (but not for the reason you think), the security threats impacting smart cities, and a new feature coming to your Facebook app.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Visit https://www.smashingsecurity.com/142 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jack Rhysider.

Sponsored By:

• Immersive Labs: Immersive Labs provides the world's first fully interactive, on-demand, and gamified cyber skills platform.
• Try it for free at immersivelabs.com/lite/ and drive down your organisation’s cyber risk while reducing training costs.
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Mercedes spies on drivers by secretly installing tracking devices in cars and passing information to bailiffs — The Sun.
• Three-unique-words 'map' used to rescue mother and child — BBC News.
• Rolling a Reliant Robin - Top Gear — YouTube.

World-chess-champion-turned-activist Garry Kasparov joins us as we discuss celebrity lookalikes, smartphone fleeceware, the impact Coronavirus is having on security, and how a popular new video game is being used for political ends.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Garry Kasparov.

Yes, the Garry Kasparov. Graham was pretty excited too.

Visit https://www.smashingsecurity.com/174 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Garry Kasparov.

Sponsored By:

• Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.
• 
  
• 
  
• 
  
• Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor

Support Smashing Security

Links:

• Don’t let fleeceware sneak into your iPhone — Sophos.
• Fleeceware apps persist on the Play Store — Sophos.
• Fleeceware apps discovered on the iOS App Store — ZDNet.
• How to see or cancel subscriptions on your iPhone, iPad or iPod touch — Apple Support.
• How to cancel, pause, or change a subscription on Google Play — Google Play Help.

A Facebook friend request leads to arrest, Twitter scams ride again via promoted ads, and adult websites expose their members. Oh, and Graham finds out what Rule 34 is.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.
• 
  
• Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Robber contacts victim on Facebook to apologize, Reading police say — Reading Eagle
• Maria Varmazis spots a promoted, verified scam tweet — Twitter
• Why is Elon Musk promoting this Bitcoin scam? (He’s not) — Naked Security
• Twitter thought Elon Musk's bizarre tweets were evidence he'd been hacked — Graham Cluley

The FBI is hoping that its hunt for Capitol rioters will go viral, a cryptocurrency con lets its perpetrator live the high life... for a while, and just what does Facebook have against cows and a team of cricketers?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology correspondent Zoe Kleinman.

Visit https://www.smashingsecurity.com/215 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Zoe Kleinman.

Sponsored By:

• 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.
• Recorded Future: Recorded Future's podcast, Inside Security Intelligence, takes a deep dive into the world of cyber threat intelligence
• 
  
• They share stories from the trenches and the operations floor, giving you the lowdown on established and emerging adversaries
• 
  
• Whether it's the SolarWinds breach, 5G conspiracy theories, or Russian election interference, Inside Security Intelligence gives you a fresh take from a variety of industry experts

Support Smashing Security

Links:

• The FBI Wants You To Make These Photos Of Capitol Insurrectionists Go Viral — Huffington Post.
• Capitol Violence — FBI.
• Sedition Hunters.
• Boston Bombing: The Anatomy of a Misinformation Disaster — The...

Incognito mode on your browser not as private as you think, consumer spyware companies get hacked, Graham is accused of "multitasking" in his hotel room, and Carole champions the students of Parkland, Florida.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who recorded without a special guest this week.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• How to go 'Incognito' on your web browser, and what it means
• Your private browsing isn’t as incognito as you want it to be
• Veil is private browsing for the ultra-paranoid
• Hacker Strikes ‘Stalkerware’ Companies, Stealing Alleged Texts and GPS Locations of Customers
• Spy on Your Valentine Using Spy Software
• How stalking has been made easier by the internet and social networks
• Trailer Nite
• Florida student to NRA and Trump: 'We call BS' - YouTube
• March for our lives
• Emma González on Twitter

Logic bombs in Excel spreadsheets, how should we protect our brain data from big companies, and how did bizarre messages about Drill rap end up on the Metropolitan Police's Twitter account and website?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BJ Mendelson.

Visit https://www.smashingsecurity.com/138 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: B J Mendelson.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Tinley Consulting's website.
• The meaning and origin of 'Come a cropper'.
• Siemens contractor pleads guilty to planting logic bomb in company spreadsheets — ZDNet.
• Brain data regulation — Practical Ethics, University of Oxford.
• Monkey uses brain to control prothetic arm — YouTube.
• Neuralink and the Brain's Magical Future — Wait But Why.

Were hotel guests really trapped in their rooms by ransomware? Does anti-virus increase your attack surface so much that it's not worth running at all? And 11% of people on the internet are running ad blockers, says company which blocks ad blockers.

Oh, and we have a new theme tune...

Computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault chit-chat about the world of online privacy and computer security.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Vanja Švajcer.

Support Smashing Security

Links:

• Hotel guests locked in their rooms by ransomware? It doesn't make sense
• Disable Your Antivirus Software (Except Microsoft's)
• It might be time to stop using antivirus
• Google Chrome engineer says Windows Defender "the only well behaved AV"
• 500 publishers were hacked through anti-ad block tool PageFair
• News media move to ban ad blockers from websites
• Encryption and Other Tricks Are Making Malvertising Harder to Hunt
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Kalashnikov unveils its "smart" shotgun, San Diego struggles with its street lights, and a researcher reveals how he found a way to hack every Tesla on the planet.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by David McClelland.

Visit https://www.smashingsecurity.com/196 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: David McClelland.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats.
• 
  
• Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses.
• 
  
• Go to immersivelabs.com/smashing

Support Smashing Security

Links:

• Kalashnikov smart shotgun - MP-155 Ultima.
• Kalashnikov reveals first Russian-made smart shotgun MP-155 Ultima — YouTube.

Crime forums on Facebook, fraudsters pose as anti-fraud hotlines, and how big advertising companies are in bed with the rampant data collection of internet giants.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest B J Mendelson, author of "Social media is bullsh*t."

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: B J Mendelson.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• Oh look "security expert" Rudy Giuliani shows you how to do a special "dark web scan", courtesy of Experian...
• Nobody seems to know what Rudy Giuliani's cybersecurity firm actually does
• Deleted Facebook Cybercrime Groups Had 300,000 Members
• How to Report Abuse on Facebook
• Martin Sorrell Resigns as Chief of WPP Advertising Agency
• Airbnb co-founder Nathan Blecharczyk spam pioneer says book
• An Apology for the Internet — From the People Who Built It
• Automated Action Fraud Tech Support scam calls
• Crime in England and Wales from Office for...

Scammers from Africa are preying on US businesses, a drug dealer makes a mistake when hiding his Bitcoin fortune, and the Coronavirus pandemic is causing scams to soar and raising questions about facial recognition.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Anna Brading.

Visit https://www.smashingsecurity.com/167 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Anna Brading.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Business Email Compromise (BEC) and G Suite: How the Exaggerated Lion Cybercrime Group Cashes Out — Agari.
• A weed dealer’s $59M lesson: Don’t hide Bitcoin keys with a fishing rod — Ars Technica.
• Chance encounter with gardaí unmasked bitcoin millionaire drug dealer — Irish Times.
• Man who ‘threw away’ bitcoin haul now worth over $80m wants to dig up landfill site — The Independent.

Roku users are revolting after their TVs are bricked by the company, we learn how to make money through conspiracy videos on TikTok, and just how much is your car snooping on your driving?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Dave Bittner from "The Cyberwire" podcast.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Smashing Security episode 317 - Includes a discussion of which came first - Battle Bots or Robot Wars?
• “Disgraceful”: Messy ToS update allegedly locks Roku devices until users give in - Ars Technica.
• Dispute resolution terms - Roku.
• Enshittification - Wikipedia.
• Craig Shergold - Wikipedia.
• “Why TikTok Is Becoming A Conspiracy Playground” - YouTube.
• Dave Bittner’s AI-generated image of Graham Cluley - Twitter.
• Graham’s AI-generated video about pig butchering - Twitter.
• Automakers Are Sharing Consumers’ Driving Behavior With Insurance Companies - New York Times.
• Drivers concerned as automakers share driving data with insurance companies - NewsByte.
• Carmakers are sharing driving habits with insurance companies, unbeknownst to owners - TechSpot.
• Google Arts & Culture.
• WELI - Kangaroo Time (Club Edit) (From Dance Your PhD 2024 - OVERALL WINNER) - YouTube.
• Dance Your Ph.D. - Wikipedia.
• Animal DNA Run - CrazyGames.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money....

Pulchritudinous women with glossy long hair are targeting Israeli officials via Facebook - but why? Scammers have found a new way to gain access to your most sensitive information - but how? And armchair detectives are helping investigating cold cases involving DNA - but should they?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/270 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
• 
  
• Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.
• 
  
• You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.
• Keeper Security: Keeper Security’s enterprise password management platform locks down logins, payment cards, confidential documents, API keys, and database passwords in a patented Zero-Knowledge encrypted vault. And, it takes less than an hour to deploy across your organization.
• 
  
• Sign up for a Keeper free trial for your organization today, and get a free 3-year personal plan, at keepersecurity.com/smashing

Support Smashing Security

Links:

• How Barbie's body size would look in real life — Daily Mail.

United States Customs and Border Protection had sensitive data stolen, but the hackers didn't have to breach its network. Apple has ambitious plans to make iPhone users safer online. And trolls are using Twitter lists to target their victims.

All this and much much more is discussed in the latest edition of the MULTI-AWARD-WINNING "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis.

Visit https://www.smashingsecurity.com/132 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• Edgewise Networks: Edgewise is the industry's first zero-trust segmentation platform. It’s simple to use interface lets you stops data breaches by allowing only verified software to communicate within your cloud or data centre. Edgewise's data-centric approach makes micro-segmentation simpler and more secure.
• Learn more and get a free trial at edgewise.net.
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Smashing Security named the Best Security Podcast — Graham Cluley.
• U.S. Customs and Border Protection says photos of travelers into and out of the country were...

Dream girlfriends, AI love scams, and an alleged spy who is said to have made a series of blunders.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Former Soldier Indicted for Attempting to Pass National Defense Information to People’s Republic of China - US Department of Justice.
• ‘Dream’ AI Girlfriend Randomly Turns Into Nude Jennifer Lopez, Has Four Legs - 404 Media.
• LoveGPT: How “single ladies” looking for your data upped their game with ChatGPT - Avast Threat Labs.
• 5 Signs Your Tinder Match Is a Scam Bot - LifeWire.
• Support Alie Hothersall’s fundraising for Mind - JustGiving.
• “The Last Action Heroes” by Nick de Semlyen - Pan Macmillan.
• Life Kit  - NPR.
• Tom Hanks has made a complaint - Twitter.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Devo – Register now to join Devo and other cybersecurity industry professionals on October 18 for sessions and panels focused on de-stressing, SOC career development, and more!
• Moonlock — cybersecurity wing of MacPaw. Developers of the antimalware tech in CleanMyMac X — Moonlock Engine.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or

Hacking fears are raised at Western Europe's most hazardous building, why porn sites might soon be scanning your face, and our guest narrowly avoids a Facebook Marketplace scammer.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Dinah Davis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Why Facebook Is Rebranding Itself as Meta - INSEAD.
• Windscale fire - Wikipedia.
• Sellafield nuclear site hacked by groups linked to Russia and China - The Guardian.
• Response to a news report on cyber security at Sellafield - UK Government.
• Response to Guardian news article - Office for Nuclear Regulation.
• Common Facebook Marketplace scams and how to avoid them - Comparitech.
• Advice from Google on how to remove malware and unsafe software from Android devices - Google.
• New Report Reveals Truths About How Teens Engage with Pornography - Common Sense Media.
• ‘A lot of it is actually just abuse’- Young people and pornography - Children's Commissioner for England.
• Implementing the Online Safety Act: Protecting children from online pornography - Ofcom.
• UK age assurance guidance for porn sites gives thumbs up to AI age checks, digital ID wallets and more - TechCrunch.
• Demotivational posters.
• "Her Time: How Trailblazing Women Scientists Decoded the Hidden Universe," by Shohini Ghos.
• Meet Your Second Wife - Saturday Night Live sketch, YouTube.
• ‘Modern Love Podcast’: Our 34-Year Age Gap Didn’t Matter, Until It Did - New York Times.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Grindr, MyFitnessPal, and Panera Bread. They've all had data breach scares of varying degrees this week. Some handled the security breaches well, some didn't. We took a look at how well different firms are respecting your data privacy.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who don't have a special guest this week.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• Grindr Is Letting Other Companies See User HIV Status And Location Data
• Grindr Will Now Remind You To Get Tested For HIV
• Grindr to stop sharing HIV status with third parties
• Hackers steal data of 150 million MyFitnessPal app users
• MyFitnessPal Security Issue FAQ
• Smashing Security: Passwords - a Smashing Security splinter
• Panerabread.com Leaks Millions of Customer Records
• No, Panera Bread Doesn’t Take Security Seriously
• Don't blame Panera Bread's security guy just because he used to work at Equifax

Endangering your friends online, the fibs told by VPN vendors, developments from the world of cryptomining, and Carole shares an animated GIF with Mikko and Graham.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mikko Hyppönen from F-Secure.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Mikko Hyppönen.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Mikko's adventure game "Paha Juttu" at the Finnish Game Museum
• Download the Paha Juttu Commodore 64 floppy image file (d64)
• Commodore 64 online emulator (load a d64 file into this)
• Mat Johnson's tweet about Facebook logging his phone calls and texts
• Fact Check: Your Call and SMS History
• Who and What Is Coinhive?
• 100+ VPNs & Their Logging Policy (What Logs Are Kept by Who?)
• Which VPN Services Keep You Anonymous in 2018?
• ‘Lone DNC Hacker’ Guccifer 2.0 Slipped Up and Revealed He Was a Russian Intelligence Officer

Anti-porn "shameware" apps take a privacy pounding, is your image already being used by AI, and deepfake danger continues to deepen.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• The Ungodly Surveillance of Anti-Porn ‘Shameware’ Apps - WIRED.
• Covenant Eyes.
• Sick and tired of trying to quit porn? You’re not alone - Covenant Eyes promotional video.
• Fortify.
• AI Is Probably Using Your Images and It's Not Easy to Opt Out - Vice.
• ISIS Executions and Non-Consensual Porn Are Powering AI Art - Vice.
• Have I been trained?
• The Deepfake Danger: When It Wasn’t You On That Zoom Call - CSO Online.
• Deepfake Audio Has A Tell – Researchers Use Fluid Dynamics To Spot Artificial Imposter Voices - The Conversation. 
• Deephy: On Deepfake Phylogeny - Cornell University.
• On The Horizon: Interactive And Compositional Deepfakes - Microsoft. 
• Detect DeepFakes: How to counteract misinformation created by AI - MIT University. 
• New Deepfake Threats Loom, Says Microsoft’s Chief Science Officer - Venture Beat.
• The Joy of Sets - BBC Archive.
• Steam Deck.
• Am I Being Unreasonable? - BBC iPlayer.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kolide – the SaaS app that sends

Why a business spat resulted in Liberia falling off the internet, how the US Government shutdown is impacting website security, and the perplexing world of extreme IoT devices.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Zoë Rose.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Zoë Rose.

Sponsored By:

• Boxcryptor: Boxcryptor encrypts your sensitive files and folders in Dropbox, Google Drive, OneDrive and many other cloud storages. It combines the benefits of the most user friendly cloud storage services with the highest security standards worldwide. Encrypt your data right on your device before syncing it to the cloud providers of your choice.
• 
  
• 
  
• 
  
• Listeners can get a 40% discount on the Boxcryptor Personal License (private use) and Boxcryptor Business (perfect for self-employed) by visiting smashingsecurity.com/boxcryptor
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Mirai Botnet DDoS (Sky News) — YouTube.
• Massive Cyber Attack Knocks Out Access To Websites (CNBC) — YouTube.
• Download the Mirai source code, and you can run your own IoT botnet — Graham Cluley.

Mix TikTok with facial recognition, and you've got a doxxing nightmare, T-Mobile users report bizarre behaviour in their accounts, and a Windows flaw provides a new means of infecting users.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• T-Mobile customer reports privacy breach - Twitter.
• T-Mobile US exposes some customer data – but don't call it a breach - The Register.
• T-Mobile denies new data breach rumors, points to authorized retailer - Bleeping Computer.
• Connectivity Source - Despite appearances, don’t confuse it with T-Mobile.
• ThemeBleed exploit is another reason to patch Windows quickly - MalwareBytes.
• If I Embarrass My Baby on TikTok, Will He Stay My Baby Forever? - New York Times.
• They Gossiped At Brunch. Now There's a Mob After Them - Rolling Stone.
• The End of Privacy is a Taylor Swift Fan TikTok Account Armed with Facial Recognition Tech - 404 Media.
• Egg crack challenge,the last baby is so cute - YouTube.
• Trailer for “The Deepest Breath” - YouTube.
• “The Deepest Breath” - Netflix.
• Nitpick: Meaningless communications.
• Naked Security.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Gigamon – Download the Gigamon Hybrid Cloud Security Survey to learn about the hidden dangers of encrypted traffic.
• Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees...

Tesla takes customer service a step too far, is it a romantic gesture or stalking when you email 246 women called Nicole, and Carole finds herself in a Facebook dilemma.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jessica Barker.

Sponsored By:

• Smashing Security: We're sponsoring ourselves this week! Get in touch at studio@smashingsecurity.com if you're interested in partnering with us for a future episode of the show.

Support Smashing Security

Links:

• How I Went From Tesla Delivery Hell To Tesla Giving Me Control Of Their Site Forums With Over 1.5 Million Tesla Account Contacts — DansDeals.com.
• Customer Complains About Tesla Forums, Tesla Accidentally Gives Him Control Over Them — Motherboard.
• A Guy Emailed 246 Nicoles Trying To Find The One He Met At A Bar And Now They're All Friends — Buzzfeed News.
• Facebook exodus: 44 percent of American users ages 18-29 have deleted app — CNBC.
• How Facebook employees reacted to NYT report on leadership, scandals — Business Insider.
• Delay, Deny and Deflect: How Facebook’s Leaders Fought Through Crisis — New York Times.
• Facebook’s top execs ‘make tobacco executives look like Mister Rogers’ — Recode.

Personal information is going for a song, and the banks want social media sites to pay when their users get scammed.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Vote for "Smashing Security" in the European Security Blogger Awards.
• Re-Victimization from Police-Auctioned Cell Phones - Krebs on Security.
• Fraud Strategy: stopping scams and protecting the public - UK Gov.
• Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested - Hacker News.
• Social media firms should reimburse online fraud victims, say UK bankers - The Guardian.
• How Many People Use Social Media in 2023? - Oberlo.
• Scam social media quizzes dupes people into revealing personal details - ITV News.
• Where are you most likely to be scammed: phone, text or social media? - This is Money.
• Major bank calls out Meta for huge rise in scams on its platforms -  This is Money.
• The Legend of Zelda: Tears of the Kingdom - Nintendo.
• ScanSnap SV600 - Fujitsu.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
• Outpost24 – Understand your shadow IT risk with a free attack surface analysis.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on

The Darkside ransomware gang thinks it's a modern-day Robin Hood when it donates extorted Bitcoins to charity, the micro-targeted ad industry could pop like a bubble, and would you trust a burger-flipping robot?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Tim Hwang.

Plus don't miss our featured interview with Recorded Future's Levi Gundert.

Visit https://www.smashingsecurity.com/201 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Levi Gundert and Tim Hwang.

Sponsored By:

• Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources.
• 
  
• For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express.
• 
  
• Get it now at smashingsecurity.com/recordedfuture
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises...

A gallery is tricked into giving millions to a fraudster, software tells doctors to push opioids onto patients, and an artist finds a novel way to trick Google Maps into thinking there's a traffic jam.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who ended up recording without a guest this week.

Visit https://www.smashingsecurity.com/164 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Castbox, Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Fraudsters Posing as Art Dealer Got Gallery to Pay Millions — Bloomberg.
• ‘Hampstead Heath, Harrow in the Distance’, John Constable, David Lucas, published 1855 — Tate.
• Electronic Health Records Vendor to Pay $145 Million to Resolve Criminal and Civil Investigations — Department of Justice.
• In secret deal with drugmaker, health-records tool pushed opioids — Los Angeles Times.

Who's that new guy working at your company, and why don't you recognise him from the interview? How are hacktivists raising the heat in Belarus? And should you be fully vaxxed for your online date?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/260 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• 1Password: Secure online payments and grow your business with Brex and 1Password.
• 
  
• Brex and 1Password have partnered to make online payments secure and frictionless. 1Password customers can now use Brex virtual credit cards to check out online with just two clicks.
• 
  
• 1Password's integration with Brex is available right now to 1Password Teams and Business customers based in the United States.
• 
  
• Learn more at smashingsecurity.com/brex
• Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.
• 
  
• Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.
• 
  
• Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping.
• 
  
• Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform.
• 
  
• Find out more and try it for free at...

Heating systems are left vulnerable to attack in the high courts, cybercrime unicorns have become a reality (but what are they?), over 15 Terabytes of NFTs are made available for anyone to download ... and Carole reveals her Pick of the Year.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mikko Hyppönen.

Visit https://www.smashingsecurity.com/253 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Mikko Hyppönen.

Sponsored By:

• Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents...
• 
  
• Listeners who mail in referencing Smashing Security get a 10% discount on their order!
• Perimeter 81: Perimeter 81 is the first-ever Cybersecurity Experience Platform, designed around Instant Deployment, Unified Management, Integrated Security, and Full Visibility.
• 
  
• Perimeter 81 allows organizations of any and all industry sizes to support IT teams with robust tools to secure and manage your global network with one unified platform.
• 
  
• Securing remote access for cloud and hybrid businesses and organizations, Perimeter 81 provides unified solutions such as Zero Trust Network Access, Firewall as a Service, Device Posture Check, and more.
• 
  
• Learn more and request a demo at perimeter81.com
• 1Password: 1Password 8 for Windows has been reimagined to feel right at home on the world's most popular desktop operating system.
• 
  

MPs aren't just getting excited about an upcoming election, but also the fruity WhatsApp messages they're receiving, can we trust AI with our health, and who on earth is pretending to be a producer for the Drew Barrymore TV show?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by John Hawes.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Naked photos sent in WhatsApp ‘phishing’ attacks on UK MPs and staff - Politico.
• How I was targeted in the Westminster honeytrap - BBC News.
• The Westminster honeytrap plotter tried to catch me too - The Times.
• How Westminster WhatsApp ‘honey trapper’ targeted party conference season - Politico.
• William Wragg quits Commons roles over Westminster honeytrap - BBC News.
• A new prescription - The Economist.
• Change Healthcare faces second ransomware dilemma weeks after ALPHV attack - The Register.
• ‘The Drew Barrymore Show’ Targeted by Fraudsters in Celebrity Scamming Effort  - Yahoo! News.
• ‘Drew Barrymore Show' Targeted in Hacking, ID Fraud Scam by Imposter Who Posed as Producer and More - Variety.
• Guy Fieri Calls Drew Barrymore “Gangster” For Talking With Her “Mouth Full Of Food” On ‘The Drew Barrymore Show’ - Decider. 
• Beware The Fake Drew Barrymore Le Creuset Cookware Giveaway Scam - Malware Tips.
• Carmen - Royal Opera House.
• Mandy - BBC iPlayer.
• Anita de Monte Laughs Last - Bloomsbury.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kiteworks – Step

The WannaCry ransomware has struck! But before we tackle that subject, and who we should blame for one of the highest profile malware attacks for years, we discuss how HP has been unwittingly capturing the keystrokes of its laptop users. Then we briefly discuss what might be the worst cinema date in history, before rounding things off with a discussion of hackers extorting money out of movie studios.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul "Pob" Baccas.

Show notes:

• Hello to Jason Isaacs - Witterpedia.
• Unintended/Covert Storage Channel for sensitive data in Conexant HD Audio Driver Package - modzero Security Advisory.
• Keylogger Found in Audio Driver of HP Laptops - Bleeping Computer.
• HP responds to laptop keylogger fiasco, promises ‘fix shortly' - Trusted Reviews.
• Tweet from @ths - Twitter.
• Backin Up Song - YouTube.
• The Sobig Worm - Wikipedia.
• Customer Guidance for WannaCrypt attacks - Microsoft.
• Microsoft Security Bulletin MS17-010 - Microsoft.
• Microsoft: WannaCry outbreak reveals why governments shouldn't hoard vulnerabilities - Graham Cluley.
• ‘THIS IS CRAZY’: Austin man sues date for texting during movie - Statesman.
• Hackers Seem to Dump Pirates of the Caribbean on Torrent Sites Ahead of Premiere - Softpedia.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Paul Baccas.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats. Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

The chips are down, as tech companies struggle to protect against the Meltdown and Spectre flaws. The White House is getting tough on leakers by banning personal devices from the West Wing. And someone has been embedding a Bitcoin wallet into their hand...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: David McClelland.

Sponsored By:

• CloudBerry Lab: Backup files, folders and system images to the cloud storage of your choice - with built-in 256 bit encryption ensuring your precious data remains private.

Support Smashing Security

Links:

• Apple fixes the Meltdown and Spectre flaws in Macs, iPhones, and iPads
• Spectre? Meltdown? F*CKWIT? Calm down and make yourself some tea
• Until your anti-virus adds this Registry key, you aren't getting any more Windows security updates
• Important information about Microsoft Meltdown CPU security fixes, antivirus vendors and you
• Ouch! Microsoft's Meltdown and Spectre security update bricks some AMD-powered PCs
• Ripple soars, becomes second-biggest cryptocurrency by market cap
• BICHIP
• Would you store Ripple and Bitcoin in 'mark of the beast' microchip?
• Biohacker Summit 2017 – Uniting Technology & Nature

iPhone photos come back from the dead! Scarlett Johansson sounds upset about GPT-4o, and there's a cockup involving celebrity fakes.

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Anna Brading of Malwarebytes.

Plus! Don't miss our featured interview with Sandy Bird of Sonrai Security.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• When NASA Lost a Spacecraft Due to a Metric Math Mistake - Simscale.
• The worst sales promotion in history - The Hustle.
• Nonconsensual AI Porn Maker Accidentally Leaks His Customers' Emails - 404 Media.
• UK's Ministry of Defence fined after Bcc email blinder that put the lives of Afghan citizens at risk - Hot for Security.
• £200,000 fine for exposing possible child abuse victims in classic Cc/Bcc email blunder - Graham Cluley.
• Apple's Photo Bug Exposes the Myth of 'Deleted' - Wired.
• OpenAI Voice Scandal: Sky's Fall From Grace - YouTube. 
• How the voices for ChatGPT were chosen - OpenAI.
• As AI becomes more human-like, experts warn users must think more critically about its responses - CBC News.
• What We Lose When ChatGPT Sounds Like Scarlett Johansson - The New York Times.
• Scarlett Johansson’s Statement About Her Interactions With Sam Altman - The New York Times.
• Kin TV series - Wikipedia.
• Portal connecting Dublin and New York 'reawakens' under new restrictions after 'inappropriate behaviour' - Sky News.
• How to cook the perfect chicken rendang – recipe - The Guardian.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Elon Musk is still causing chaos at Twitter (and it's beginning to impact users), are scammers selling your house without your permission, and Google gets stung with a record-breaking fine.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Plus don't miss our featured interview with Pentera's Shakel Ahmed talking about automating continuous cyber defence validation.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Graham offers Dave Bittner some advice on “Welcome Datacomp”... in 1995! - Usenet.
• Elon Musk apologises to users for Twitter being slow - Twitter.
• Former Twitter employee doesn’t think Elon Musk knows what he’s talking about - Twitter.
• Eric Frohnhoefer says Elon Musk is wrong - Twitter.
• Twitter engineer calls out Elon Musk for technical BS in unusual career move - The Register.
• Elon Musk says that he is turning off microservices “bloatware” - Twitter.
• Twitter’s SMS Two-Factor Authentication Is Melting Down - Wired.
• Elon only trusts Elon - Platformer.
• Elon’s paranoid purge - Platformer.
• Google to pay nearly $400 million over deceptive location tracking practices - The Record.
• Follow Smashing Security on Mastodon.
• South Bay Man Pleads Guilty to Participating in a Multimillion-Dollar Real Estate Scam Involving Fake Open Houses at Not-for-Sale Homes - Justice.gov.
• A South Bay man accepted hundreds of offers from open houses. But the homes weren’t for sale - LA Times. 
• The typing of the Regex.
• Fesshole - Twitter.
• If Books Could Kill -...

Websites still using HTTP are marked as "not secure" by Chrome, 85,000 Google employees haven't been phished for a year, and if you're buying drugs via PayPal’s Venmo app you should say goodbye to privacy.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Scott Helme.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Special Guest: Scott Helme.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• Vote for Smashing Security in the podcast awards!
• Smashing Security 039: Woah - are we talking to a cyborg?
• Google: Security Keys Neutralized Employee Phishing
• Yubico
• Less than 10% of Gmail users have enabled two-factor authentication
• Google's Advanced Protection Program
• What is Google’s Advanced Protection Program? - YouTube
• Two-factor authentication versus two-step verification
• One small step for a browser, one giant leap for web security!
• Chrome browser flags Daily Mail and other sites as 'not...

Actor, presenter and writer Robert Llewellyn, famous for playing the part of Kryten in the science-fiction comedy "Red Dwarf," joins us as we discuss robots gone rogue, electric vehicle nightmares, and creepy companions.

All this and much much more can be found in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Robert Llewellyn - famous for "Fully Charged," "Scrapheap Challenge," and as Kryten on "Red Dwarf."

Visit https://www.smashingsecurity.com/217 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Robert Llewellyn.

Sponsored By:

• 1Password: 1Password offers seamless syncing across all your computers and mobile devices, so you can store and access unlimited passwords from anywhere at any time. Only you have the keys to decrypt your data and sensitive information – 1Password doesn’t know it, doesn’t share it, and doesn’t sell it.
• 
  
• Protect your whole family and get 50% off when you sign up for a 1Password Family account – make your home a 1Password household.
• 
  
• For more details visit www.1password.com/switch50

Support Smashing Security

Links:

• 'Drunk' robot vacuums spark complaints from owners — BBC News.
• Roomba S9+ weird behaviour on version 3.10.8 — Reddit.
• Time lapse video of i7+ attempting to return to clean base after 3.12.8 update — Reddit.
• Robot vacuum cleaners can eavesdrop on your conversations, researchers reveal — Bitdefender BOX blog.
• The Hidden Cyber...

Don't let an internet-enabled sex toy make your most private moments oh-so-public. Samsung's wannabe-Android-killer is found lacking.  And did you hear about the firm that is micro-chipping its employees? 

All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest John Hawes.

Show notes:

• Vulnerable Wi-Fi dildo camera endoscope. Yes really - Pen Test Partners
• Samsung's Android Replacement Is a Hacker's Dream - Motherboard
• Companies start implanting microchips into workers' bodies - LA Times

This episode of Smashing Security is made possible by the generous support of Recorded Future — the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.

Sign up for free daily threat intelligence updates at recordedfuture.com/intel

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: John Hawes.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats. Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Cryptocurrency traders suffer a hamster-related loss, beware of charity scammers this holiday season, and do you have the patience to sit through Peter Jackson's eight-hour Beatles documentary?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are flying solo this week.

Visit https://www.smashingsecurity.com/254 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

• Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.
• 
  
• Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.
• 
  
• Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping.
• 
  
• Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform.
• 
  
• Find out more and try it for free at uptycs.com
• 1Password: It’s that time again when we’re all thinking about plans for the upcoming year. Does your plan include making your team more productive and secure?
• 
  
• 100,000 businesses use 1Password to secure employees at scale by encrypting their passwords and sensitive information and helping them get more done, faster.
• 
  
• That’s why, for a limited time only, new customers can get 25% off the first year of 1Password Business and find out how 1Password can boost productivity while protecting their most sensitive data.
• 
  
• Act fast! This deal is only good

Facebook has managed to do the seemingly impossible - and had a data breach about its handling of a data breach. Meanwhile, we chat to the host of the brand new podcast about North Korea's hackers targeting the rest of the world, and discuss if an intern can be trusted to monitor your security.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Geoff White of "The Lazarus Heist" podcast.

Plus! Don't miss our featured interview with Duo's Helen Patton.

Visit https://www.smashingsecurity.com/224 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Geoff White and Helen Patton.

Sponsored By:

• 1Password: The 1Password you know and love, now for all your company secrets
• 
  
• 1Password protects secrets like logins and credit cards. Secrets Automation protects secrets in your company infrastructure – like API tokens, application keys, and private certificates – and supplies them when and where they’re needed.
• 
  
• Visit 1password.com/secrets/ to learn more.
• Duo: While remote work has been on the rise for years now, the recent rapid expansion of work-from-home culture presents new security challenges. Duo Security makes application access more secure for organizations of all sizes. Its modern access security is designed to safeguard all users, devices, and applications - so you can stay focused on what you do best.
• 
  
• Proactively reduce the risk of a data breach, verify users' identities, gain visibility into every device and enforce polices to secure access to every application. Give your organization the peace-of-mind that only complete device visibility can bring. Visit Duo.com to sign-up for a free 30 day trial.

Support Smashing Security

Links:

Darknet Diaries host Jack Rhysider joins us to discuss a cybersecurity goof in the wake of the US presidential elections, the US finally fingering the hackers responsible for disrupting the Winter Olympics in South Korea, and to take a long hard look at long hard legal mumbojumbo...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jack Rhysider from Darknet Diaries.

Plus don't miss our featured interview with Mimecast's Danielle Papadakis.

Visit https://www.smashingsecurity.com/204 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Danielle Papadakis and Jack Rhysider.

Sponsored By:

• Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation).
• 
  
• Grab your copy at smashingsecurity.com/mimecasthub
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Kroll: Rapidly detecting a threat is meaningless without the ability to respond with confidence. Kroll responds to over 2,000 cyber incidents every year and is uniquely positioned to bring that capability and...

Police are hoping to stop kids becoming cybercriminals by bombarding them with Google Ads, phishers rub their hands in glee at the NHS track and trace service, and just how does a nano-layer of quantum holographic catalyzer technology make a USB stick cost hundreds of pounds?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Visit https://www.smashingsecurity.com/181 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Mark Stockley.

Sponsored By:

• Deep Instinct: Most people agree that the most effective way to reduce the cost of an attack is to prevent it from happening in the first place!
• 
  
• 
  
• Deep Instinct strives to prevent all known and unknown threats using deep learning, making detection and response automated, fast and effective for any threat that cannot be prevented.
• 
  
• 
  
• Check out a report by the Ponemon Institute, which studied the cost savings of adopting an efficient prevention model. Go grab it at smashingsecurity.com/deepinstinct
• 
  
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Immersive Labs: Immersive Labs gives security professionals practical and gamified content to keep pace with the...

What is Kaspersky's ugly ring for? Is there something suspicious about how NordVPN lets you stream Disney+? And why did a hacker impersonate a music producer?

Plus we have a bonus feature interview with Rachael Stockton from Logmein, the folks behind LastPass, all about behavioral biometrics!

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Visit https://www.smashingsecurity.com/157 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Maria Varmazis and Rachael Stockton.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• "Eau de Eugene Kaspersky" — Smashing Security, episode 12.
• Kaspersky Labs - Packin' The K — YouTube.
• Thousands of taxpayers tell HMRC to delete voiceprint data it stored without consent — Graham Cluley.
• Hackers Have Stolen Almost Six Million US Government Fingerprints — Tripwire.
• Fingerprints are not the same as passwords — Graham Cluley.
• Face/Off...

Was hidden treasure found with help from a hack? What security lessons can be learnt from a controversial police raid in Florida? And are you ready for safer online get-togethers this Christmas?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

And don't miss our special featured interview with Mimecast's Max Linscott.

Visit https://www.smashingsecurity.com/208 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guests: Anna Brading and Max Linscott.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams.
• 
  
• Learn more and try it for yourself at culture.ai/smashing
• Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation).
• 
  
• Grab your...

With Graham incapacitated, we drag an episode out from the archives. In this special "splinter" episode of the "Smashing Security" podcast from September 2017 we tackle the tricky subject of backups - When did you last backup your data? How and what should you backup? And where should you store them?

Lots of questions and Graham gets to do his Tina Turner impression.

All this and more is discussed in this edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Maria Varmazis.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.
• 
  
• Go to smashingsecurity.com/metacompliance Promo Code: SMASHING

Support Smashing Security

Links:

• Tina Turner - Private Dancer — YouTube.
• The Baranton Sisters foot juggling tables — YouTube.
• How to create a robust data backup plan (and make sure it works)

It could be a case of aCropalypse now for Google Pixel users, there's a warning for house buyers, and just why is TikTok being singled out for privacy concerns?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Stop pixelating! New tool reveals the secrets of "redacted" documents - Hot for Security.
• Google Pixel exploit reverses edited parts of screenshots - The Verge.
• Tweet by researcher Simon Aarons - Twitter.
• aCropalypse demo.
• Samsung 'Fake' Moon Shots Controversy Puts Computational Photography in the Spotlight - MacRumors.
• Android phones can be hacked just by someone knowing your phone number - Graham Cluley.
• BBC advises staff to delete TikTok from work phones - BBC News.
• TikTok: UK ministers banned from using Chinese-owned app on government phones - BBC News.
• TikTok banned from official Welsh government phones - BBC News.
• Danish public broadcaster advises staff against using TikTok - BBC News.
• Canada bans TikTok on government devices - BBC News.
• European Commission bans TikTok on staff devices - BBC News.
• New bill would ban TikTok in the US but it faces long odds - BBC News.
• A Retired Teacher and Her Daughter Were Scammed Out of $200,000 Over Email: 'I'm 69 Years Old and Now I'm Broke and Homeless' - Entrepreneur.
• Retired Colorado teacher left homeless and broke after scammers hijack house sale - MSN.
• Homebuyers scammed out of nearly $200,000 - YouTube.
• Stolen life savings Vickie and Sarah Ragle - Go Fund Me.

Remember when a US mother was accused of distributing explicit deepfake photos and videos to try to get her teenage daughter's cheerleading rivals kicked off the team? Well, there has been a surprising development. And learn how cybercriminals have been stealing boomers' one-time-passcodes via a secretive online service.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• ‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts - TechCrunch.
• Cheerleader's mom created deepfake videos to allegedly harass her daughter's rivals - ABC News.
• Bucks County mom doctored videos to harass girls on daughter's cheerleading sqaud, prosecutors say - Philly Voice.
• Spone v. Reiss, Civil Action 23-0147 - Casetext.
• Mother 'used deepfake to frame cheerleading rivals' - BBC News.
• She was accused of faking an incriminating video of teenage cheerleaders. She was arrested, outcast and condemned. The problem? Nothing was fake after all - The Guardian.
• Parkrun - Wikipedia.
• Parkrun UK.
• Oxfordshire Artweeks 2024 - Artweeks homepage. 
• Carole’s art website - carole.wtf
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a...

Cryptomining goes nuclear, YouTube for Kids gets scary, and TV ads have been given the green light to mess with your Amazon Alexa.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Maria Varmazis.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Rapid7: InsightIDR is an intruder analytics solution that gives you the confidence to detect and investigate security incidents faster. You can download a 30-day trial by visiting www.rapid7.com/insightidr

Support Smashing Security

Links:

• Government websites hijacked by cryptomining plugin
• Russian nuclear scientists arrested for allegedly hijacking supercomputer to mine Bitcoins
• Now that's taking the p... Sewage plant 'hacked' to craft crypto-coins
• Salon website gives you a choice: turn off your ad blocker or let us mine cryptocurrencies
• Coinhive review: Embeddable JavaScript Crypto Miner - 3 days in
• Smashing Security 059: An intro to Bitcoin and Blockchain
• YouTube Kids app still showing disturbing videos
• Something is wrong on the internet – James...

ProtonMail finds itself in a privacy pickle, the big problem with Facebook's algorithmic amplification, and strange things are happening on Banksy's website.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/242 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are.
• 
  
• 1Password makes the secure thing to do the easiest thing to do.
• 
  
• Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security.
• 
  
• Find out more and try 1Password free for 14 days at 1Password.com
• Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now.

Support Smashing Security

Links:

• ProtonMail logged IP address of French activist after order by Swiss authorities — TechCrunch.
• Important clarifications regarding arrest of climate...

A rapping bank worker is accused of stealing from the vault, the devices that can hide your car's true mileage, and why it may be a case of "No No No" rather than "Ho Ho Ho" when it comes to IoT toys this Christmas.

And as Carole sups the mulled wine, Graham has problems with his internet connection...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/159 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• ‘No Chance:’ John McAfee Halts Crypto Promo as US 2020 Elections Near — Coin Telegraph.
• FBI Arrests Former Bank Employee Charged With Stealing Cash From Bank Vault — US Department of Justice.
• "Problem" video — Aceey4oez on Instagram.
• Man posted photos of himself with stacks of cash after stealing from bank: charges — Sydney Morning Herald.

A journalist is threatened with prosecution after choosing to "View Source" on a public webpage, Amazon Ring owners might be in line for a hefty fine if their neighbours complain, and is the school lunch queue a good place for facial recognition?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Visit https://www.smashingsecurity.com/248 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Dave Bittner.

Sponsored By:

• 1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels.
• 
  
• Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet.
• 
  
• Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you.
• 
  
• Visit 1Password University for free online security resources, made for everyone.

Support Smashing Security

Links:

• Missouri teachers’ Social Security numbers at risk on state agency’s website — St Louis Post-Despatch.
• Missouri governor vows criminal prosecution of reporter who found flaw in state website — Missouri Independent.

Pygmy hippopotamus bugs, DEF CON's data slip-up, and phishing fraudsters have their collars felt.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Paul Ducklin.

Visit https://www.smashingsecurity.com/238 to check out this episode’s show notes and episode links.

We're going to be taking a holiday for a couple of weeks, but will be back with a regular show later in August.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Paul Ducklin.

Sponsored By:

• 1Password: Cybercrime is at an all-time high, and it’s not slowing down, so why should you? This August, you’re invited to Security Summer School, a brand new webinar series hosted by the 1Password team.
• 
  
• Learn from security experts at top organizations, hear about sizzling security trends, and get quick tips for building a culture of security at home and work.
• 
  
• Get exclusive perks like 1Password swag for attending events, enjoy the chance to network with top security leaders, and much much more. Find out more and enroll now.
• Offensive Security: With the skills gap increasing, it’s more important than ever to train your staff effectively and efficiently. Industry-leading Offensive Security provides training for your organization designed by the same minds behind Kali Linux and the OSCP.
• 
  
• Visit smashingsecurity.com/offsec to learn more!

Support Smashing Security

Links:

• DEF CON masks and vaccination FAQ.
• Hacking DEF CON 29 — Reznok.
• Tweet by Jeff Moss (Dark Tangent)...

Internet-connected jacuzzis find themselves in hot water, and a Google engineer claims that their AI has developed feelings.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

• Hot Tub Time Machine trailer — YouTube.
• Hacking into the worldwide Jacuzzi SmartTub network — Eaton Works.
• SmartTub — Apple iOS App Store.
• SmartTub — Google Play store.
• Hot tub hack reveals washed-up security protection — BBC News.
• Google engineer Blake Lemoine thinks its LaMDA AI has come to life — The Washington Post.
• Google engineer put on leave after saying AI chatbot has become sentient — The Guardian.
• AI's most convincing conversations are not what they seem — The Register.
• Blake Lemoine's blog.
• Van Gogh Bristol Exhibition: The Immersive Experience.
• Van Gogh: The Immersive Experience — YouTube.
• The Inquiry — BBC World Service.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kolide - the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
• Bitwarden - Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
• Drata - Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.

Support...

Security researchers find a way to unlock millions of hotel rooms, the UK introduces cyberflashing laws, and Google's AI search pushes malware and scams.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by T-Minus's Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Unsaflok - Security vulnerabilities in Saflok hotel locks.
• 3 million doors open to uninvited guests in keycard exploit - The Register.
• Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds - Wired.
• Google's new AI search results promotes sites pushing malware, scams - Bleeping Computer.
• Man who sent nude picture to teenage girl is jailed under new cyberflashing laws  - The Independent.
• Cyber-flashing convict is first to be jailed under new law - BBC News.
• What to do if you’re a victim of cyber flashing and how to report it - Metro.
• The first cyberflasher has been convicted: meet the woman who made it happen - Yahoo!
• What is cyber flashing? 'Banter' – or a sinister breach of consent - UK News.
• Love Island star sent unsolicited pictures online calls for tougher cyber laws - Bristol Live.
• Secret Agent Shenanigans: 13 Weird Spy Weapons And Gadgets - Stay Weird.
• Baldur’s Gate 3.
• Merlin Bird ID - Conell Labs.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Kolide

Special guest Geoff White can't resist using the podcast to promote his new book, "Crime Dot Com", but other than that we also discuss the creepy (and apparently legal) way websites can find out your email and postal address even if you don't give it to them, take a look at how the alleged Twitter hackers were identified, and learn about Fawkes - the technology fighting back at facial recognition.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by "Crime Dot Com" author Geoff White.

Visit https://www.smashingsecurity.com/190 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Geoff White.

Sponsored By:

• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.

Support Smashing Security

Links:

• A free chapter of Geoff's book, "Crime Dot Com"
• Start-Up Helps Conservative Websites Like the Daily Caller Store User Names, Postal Addresses of Anonymous Readers — Jezebel.
• Permission Shmarketing: How does GetEmails work? — YouTube.
• Some say we're criminals. Many say we're unethical. We think we're geniuses. But we're so, so bad... — YouTube.
• Three charged in massive Twitter hack, Bitcoin...

In this week's episode your hosts practice standing on one leg, Carole gives Graham a deepfake quiz, and we investigate how Strava may be exposing the movements of world leaders.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Smashing Security #063: Carole’s back.
• Privacy of fitness tracking apps in the spotlight after soldiers' exercise routes shared online - We Live Security.
• Smashing Security #330: Deepfake Martin Lewis, and a deadly jog in the park.
• How Emmanuel Macron can be tracked - Le Monde.
• How Emmanuel Macron can be tracked - YouTube.
• The Pentagon Wants to Use AI to Create Deepfake Internet Users - Intercept.
• Is AI eroding democracy ahead of the US election? - BBC News.
• Fooled twice: People cannot detect deepfakes but think they can - PMC.
• Detect Fakes - Kellogg Northwestern.
• DON'T LET AI STEAL YOUR VOTE! - YouTube.
• Deepfakes fool more than half of Americans, UVU study shows - KLS News radio.
• Crocodiles Of The World.
• Here's How Long You Should Be Able To Stand On 1 Leg By Age - Huffington Post.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• BlackBerry - Tune in and empower your team with the knowledge to stay connected, no matter what crisis. Learn more about BlackBerry's critical event management solutions.
• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us...

The country of Papua New Guinea is planning a month-long nationwide ban of Facebook, PornHub wants to keep your online activities more private, and Amazon Alexa forwards a married couple's private conversation to a random contact.

All this and much much more is discussed in the latest 100% GDPR-compliant edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by ESET's Tommi Uhlemann.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: Tommi Uhlemann.

Sponsored By:

• VirusTotal: VirusTotal Intelligence is one of the world’s largest malware intelligence services. Security professionals rely on it to better understand the effects of malware in enterprise networks. Find out more at https://www.virustotal.com/learn

Support Smashing Security

Links:

• Papua New Guinea to ban Facebook for a month
• Shutting down facebook in PNG is a reality
• Pornhub launches VPNhub, a VPN service with free, unlimited bandwidth
• Pornhub hack: Hackers hijacked ads with malware in year-long attack
• Be cautious, free VPNs are selling your data to 3rd parties
• How to hear (and delete) every conversation your Amazon Alexa has recorded
• Woman says her Amazon device recorded private conversation, sent it out to random contact
• Smashing Security 044: Bonus behind the scenes - shower time

Pornhub has a problem, the UK's Co-op supermarket is accused of big brother tactics, and we take a look at a security researcher's attempt to reveal the true identify of hackers.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

• On security researcher's newsletter, exposing cybercriminals behind ransomware — CyberScoop.
• ‘Imma Make U Dig Ur Own Grave’: He Doxes Ransomware Hackers and Gets Death Threats in Return — Vice.
• Intrusion Truth - Five Years of Naming and Shaming China’s Spies — Kim Zetter.
• Who Is 'Intrusion Truth,' Group Exposing Alleged Chinese Hackers? — Daily Dot.
• The Leopards Eating People's Faces Party meme — Know Your Meme.
• Tweet by Bill Ackman.
• Judge Refuses Visa’s Request to Escape Pornhub-Related Lawsuit — The New York Times.
• How to Prevent and Handle Robberies and Theft in Retail — Vend Retail Blog.
• Abuse of shopworkers is on the rise – coronavirus brought it to our attention and now we need to act — The Conversation.
• ‘Tackling violence and abuse in retail must be one of the industry’s highest priorities’ — Retail Week.
• Convenience store spy cameras face legal challenge — BBC News.
• Looking back at the career of Bernard Cribbins — YouTube.
• Tribute to David Warner — YouTube.
• Webb Compare — John Christensen.
• Support Maria Varmazis on the Pan-Mass Challenge.

Carole is in her sick bed, which leaves Graham in charge of the good ship "Smashing Security" as it navigates the choppy seas of credential stuffing and avoids the swirling waters of apps being sloppy with sensitive information.

Find out more in this latest edition of the "Smashing Security" podcast, hosted by Graham Cluley with special guest BJ Mendelson.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Operation Protect the Innocent - LA Police Department.
• A Police App Exposed Secret Details About Raids and Suspects - Wired.
• ODIN Intelligence website is defaced as hackers claim breach - TechCrunch.
• Norton LifeLock says thousands of customer accounts breached - TechCrunch.
• Ugh! Norton LifeLock password manager accounts accessed by hackers - Graham Cluley.
• Reports: Twitter’s sudden third-party client lockouts were intentional - Ars Technica.
• Spring app - Twitter.
• Spring app - Mac App Store.
• Mona app - Mastodon.
• Tulsa King trailer - YouTube.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
• ManageEngine PAM360 – A fully functional privileged access management suite that offers a holistic picture of all the privileged devices, users, and credentials in the IT infrastructure. From managing and governing access to all your enterprise resources to automating the access management life cycle in your organization, PAM360 does it all.
• DigiCert - DigiCert's Trust Lifecycle Manager sets a new bar for unified management of digital trust.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via

Apple is furious with Google over iPhone hacking attacks against Uyghur Muslims in China, DNS-over-HTTPS is good for privacy but makes ISPs angry, and concern over digital assistants listening to our private moments continues to rise.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by web security journalist John Leyden.

Visit https://www.smashingsecurity.com/145 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: John Leyden.

Sponsored By:

• MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management.
• 
  
• Go to smashingsecurity.com/metacompliance Promo Code: SMASHING
• LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.
• 
  
• But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.
• 
  
• Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
• Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.
• 
  
• "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber...

Execs at a health tech startup are sentenced to jail after a massive ad fraud, and a school is shaken after teachers are targeted via TikTok.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus don't miss our featured interview with Jason Meller of 1Password.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Outcome, a hot tech startup, misled advertisers with manipulated information, sources say - Wall Street Journal.
• Three Former Executives Sentenced for $1B Corporate Fraud Scheme - US Department of Justice.
• Graham dancing - TikTok.
• Students Target Teachers in Group TikTok Attack, Shaking Their School - The New York Times.
• “Thank you very much indeed”
• Presumed Innocent — Official Trailer - Youtube.
• Presumed Innocent - Apple TV+.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• mWISE - Don't miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and

Facebook says it's sticking up for the little guys as it picks a fight with Apple, there are testing times on the trains, and Twitter takes a tip.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ray [REDACTED].

Visit https://www.smashingsecurity.com/227 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Ray [REDACTED].

Sponsored By:

• 1Password: Introduce your family to better online security and safer browsing habits with 1Password.
• 
  
• Share more than passwords — save logins, documents, credit cards, and more, accessible on all your devices.
• 
  
• Sharing is made simple. Keep personal logins private, and easily share access to what they need.
• 
  
• Recover 1Password access for family members so they never get locked out.
• 
  
• Find out more and try 1Password free for 14 days at 1Password.com
• OneLogin: According to the OneLogin IAMokay Mental Health Survey, more than 77% of technology leaders have said that their work-related stress increased due to the COVID-19 pandemic.
• 
  
• As a result, CISOs and IT executives have been under ever-increasing pressure - leading to deteriorating mental health, addiction issues, and even suicidal thoughts and tendencies.
• 
  
• OneLogin's message? You're not alone. Attend their live event on Weds May 26, "Keeping the Mind Clear and the Company Secure" at smashingsecurity.com/oneloginiamokay
• Skiff: We store more personal information on our devices than we do in our homes. Where do you go...

It's easy to phone up a celebrity on Instagram following security breach, facial recognition at Notting Hill Carnival can't tell the girls from the boys, and companies are spying on their workers' activities.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest David Bisson.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Special Guest: David Bisson.

Sponsored By:

• Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats. Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

Support Smashing Security

Links:

• "Who Is Marcus Hutchins?" — Krebs on Security
• Ahem, Kim Kardashian Is Naked Up A Tree - Huffington Post
• Hackers Claim Apparent Instagram Fightback Will Not Stop Them From Selling Stolen ‘Doxagram’ Data - The Daily Beast
• A Note on Security from Instagram’s CTO - Instagram Blog
• London police’s use of facial recognition falls flat on its face – Naked Security
• Misidentification and improvised rules - we lift the lid on the Met's Notting Hill facial recognition operation - Liberty
• Statement from police commander for Notting Hill Carnival 2016 - Metropolitan Police